CompTIA Tech+ (FC0-U71)SecurityEasy
A small business owner wants to ensure that all employee laptops automatically encrypt their entire hard drives to protect sensitive company data in case of theft or loss. Which of the following security measures should be implemented?
- AConfigure a firewall on each laptop.
- BImplement a strong password policy.
- CInstall antivirus software.
- DEnable full disk encryption (FDE).
Show answer & explanationAnswer & explanation
Correct answer: D. Enable full disk encryption (FDE).
Full disk encryption (FDE) is designed to encrypt the entire contents of a hard drive, making data unreadable to unauthorized individuals if the device is lost or stolen. This directly addresses the owner's concern about data protection in such scenarios.
Why the other options are wrong
- A. A firewall protects against network-based threats, not against direct access to a stolen hard drive.
- B. While important, a strong password policy alone does not protect data if the physical drive is accessed without the operating system.
- C. Antivirus software protects against malware, not against unauthorized access to data on a stolen drive.
Full Disk Encryption (FDE)
A security feature that encrypts all data on a hard drive, protecting it from unauthorized access if the device is lost or stolen.
- Encrypts the entire storage device.
- Protects data at rest.
- Requires a key or password to decrypt and access data.
Memory trick: Encrypt ALL bits for total data security.